request-filtering-agent: Synchronous throw from createConnection() for literal private-IP hosts bypasses req.on('error'), crashing the Node.js process

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-62985 · Microsoft / collected KEV context

EUVD-2026-84679

GHSA-r3r9-wp5j-pq5g

cve-program · CVE-2026-62985

• https://github.com/azu/request-filtering-agent/security/advisories/GHSA-r3r9-wp5j-pq5g
• https://github.com/azu/request-filtering-agent/commit/9d12561064524807fc399158eaa5bd7a40dd8cd0
• https://github.com/azu/request-filtering-agent/releases/tag/v3.2.1

euvd · EUVD-2026-84679

• https://github.com/azu/request-filtering-agent/security/advisories/GHSA-r3r9-wp5j-pq5g
• https://github.com/azu/request-filtering-agent/commit/9d12561064524807fc399158eaa5bd7a40dd8cd0
• https://github.com/azu/request-filtering-agent/releases/tag/v3.2.1

nvd · CVE-2026-62985

• https://github.com/azu/request-filtering-agent/commit/9d12561064524807fc399158eaa5bd7a40dd8cd0
• https://github.com/azu/request-filtering-agent/releases/tag/v3.2.1
• https://github.com/azu/request-filtering-agent/security/advisories/GHSA-r3r9-wp5j-pq5g

osv · GHSA-r3r9-wp5j-pq5g

• https://github.com/azu/request-filtering-agent/security/advisories/GHSA-r3r9-wp5j-pq5g
• https://github.com/azu/request-filtering-agent/commit/9d12561064524807fc399158eaa5bd7a40dd8cd0
• https://github.com/azu/request-filtering-agent
• https://github.com/azu/request-filtering-agent/releases/tag/v3.2.1

No related operational record is retained in the current change model.